Skip to content

docs: add multi-tenant authorization cookbook#5015

Closed
benpsnyder wants to merge 1 commit into
clockworklabs:masterfrom
benpsnyder:docs/multi-tenant-authorization-cookbook
Closed

docs: add multi-tenant authorization cookbook#5015
benpsnyder wants to merge 1 commit into
clockworklabs:masterfrom
benpsnyder:docs/multi-tenant-authorization-cookbook

Conversation

@benpsnyder
Copy link
Copy Markdown
Contributor

Summary

  • Adds a multi-tenant authorization cookbook for SpacetimeDB modules.
  • Shows where to put JWT claims versus mutable authorization tables.
  • Includes table model examples, reducer guard patterns, sender-filtered views, impersonation, API-key/robot grants, gateway considerations, and an authorization checklist.

Why

Issue #5004 includes a SaaS gateway/auth stack where app-owned auth identifies the caller, but SpacetimeDB still needs module-local authorization for tenant membership, roles, robot grants, impersonation, and audit. This cookbook connects the auth broker and gateway docs to concrete table, reducer, and view patterns.

Validation

  • git diff --check
  • pnpm --dir docs typecheck
  • pnpm --dir docs build

The docs build still reports the existing docusaurus-plugin-llms-txt warning for /docs/ask-ai/ask-ai; the build completes successfully.

@cloutiertyler
Copy link
Copy Markdown
Contributor

Hi @benpsnyder, thanks for your contribution to the docs. We don't accept draft PRs in our repo to keep our PRs relatively neat and manageable, so I'm going to close this for now, at least until you have a complete PR for us to review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants